Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: c2VS+DVvaE93AlBjE9P03Ifl1XYZmpP4Zo3zG1iFIaQ=
Subject key identifier: 52:DB:AD:E4:09:49:3D:5A:D5:99:BD:EB:88:B8:92:F6:18:9C:1F:58
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019EC2C93B4C3AC34CAA4FC640B250A75969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 21:00:28 +0000
Manifest this update: Sat 13 Jun 2026 21:00:28 +0000
Manifest next update: Sun 14 Jun 2026 21:00:28 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: 4tuelVKKSmpaX6sk2duN5ygx4sQeFJ0Z4BSbjpCNAsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:3b:4c:3a:c3:4c:aa:4f:c6:40:b2:50:a7:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jun 13 21:00:28 2026 GMT
Not After : Jun 14 21:00:28 2026 GMT
Subject: CN=52dbade409493d5ad599bdeb88b892f6189c1f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:be:08:bb:5a:bc:be:fe:54:23:49:93:11:
e6:4b:ed:01:32:97:b6:41:ca:b6:cd:6a:55:08:f7:
64:93:8c:b2:00:02:11:76:45:1b:bc:cb:26:18:c6:
c5:75:87:f2:6d:e9:81:ea:44:62:fd:25:8b:31:9c:
c8:b6:25:cd:41:d0:3a:28:54:e7:8a:01:08:9d:0b:
eb:05:e8:44:04:1f:e2:dd:ee:60:eb:39:70:51:48:
b5:3b:51:55:95:a1:e8:eb:f9:39:58:69:4b:19:8e:
c6:ce:59:19:fb:70:cb:40:b3:b1:07:1b:94:df:26:
63:67:1e:5d:f2:2d:92:b1:3e:19:bd:40:6a:38:c0:
df:69:0c:0b:e7:0c:10:cb:f6:b6:20:3c:d8:37:01:
1a:1f:a4:6a:19:e7:4b:5e:3c:58:34:3c:36:d4:61:
3d:13:7e:b4:c7:86:b4:fe:92:e4:02:4d:2f:d4:bf:
ef:17:d3:76:88:e7:6b:82:bd:fe:c3:9a:5b:26:be:
6d:c4:b2:1c:d0:04:0b:1d:90:d0:89:5d:5f:09:40:
34:0e:20:00:6a:b9:af:f6:2b:57:e7:8d:2a:3c:4d:
f2:bc:35:e5:bb:09:c3:3b:c1:6a:21:28:52:b2:ae:
9a:98:5c:ec:66:79:2b:7b:a0:c7:e2:7e:fc:39:6b:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DB:AD:E4:09:49:3D:5A:D5:99:BD:EB:88:B8:92:F6:18:9C:1F:58
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9d:f5:0c:97:56:c2:60:7d:c3:4d:e8:79:73:1a:fc:20:f4:
84:11:60:be:87:ec:ed:36:c8:25:2a:8e:3f:b7:6d:f9:8d:83:
80:b2:43:84:db:96:52:4b:44:73:8d:b3:ee:ab:01:a0:b9:44:
2a:fd:8b:8f:4a:79:5d:84:43:29:ea:d9:63:b2:52:7c:39:5d:
53:e2:1f:89:6f:06:db:bf:bd:e3:28:f2:9b:51:2b:40:74:e4:
90:3b:39:87:f6:79:47:b8:73:7f:6e:fd:72:94:91:3e:27:ed:
dd:47:df:98:08:48:10:cf:3c:91:69:9b:ae:d8:2c:3e:eb:d6:
e6:9a:3d:a4:ba:c3:b4:fb:f4:26:04:9b:3f:22:50:58:62:74:
91:9a:d6:eb:19:f2:df:b2:bc:17:b1:c2:9f:e3:ab:86:ca:85:
e9:9b:01:2d:7a:65:9f:37:11:a0:cc:a9:20:f3:76:13:02:6f:
6b:43:56:ee:d6:41:be:e2:66:f2:14:e8:e7:fc:9e:98:cb:b6:
e5:09:97:27:a5:cc:a1:b6:0c:16:ba:12:dc:c6:ed:17:2a:6f:
26:e0:2e:ce:b5:61:03:15:b1:a1:5e:fb:66:97:aa:ab:c1:7e:
01:ad:a9:b8:06:3f:9b:d0:01:17:89:d1:03:fb:56:fb:bb:28:
e1:b0:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:49 2026 by rpki-client